4 ms·
GMail has a nice 2-factor scheme. While the SMS might need external services, the app-based verification keys are based on open standards and open-source code,
by ProblemFactory 14y ago
GMail has a nice 2-factor scheme. While the SMS might need external services, the app-based verification keys are based on open standards and open-source code, and can be added to any web application with about 10 lines of code: http://code.google.com/p/google-authenticator/ http://code.google.com/p/google-authenticator/
There is even a Unix login module for adding it to SSH.
- bigiain 14y agoAmazon use the same two factor auth too. I've got my AWS account secured with the Google Authenticator app using TOTP codes as well as passwords. It worries me that "consumer friendly" customer service leaks information like this, that could potentially lead to my AWS account getting suspended while fraud is investigated.
- mbreese 14y agoIt's probably a good idea not to use the same Amazon account for AWS and personal shopping, just for this reason.
- bigiain 14y agoYeah, I know that _now_… I've got real live client sites which I haven't (yet) migrated important S3/Route53/EC2/CloudFront services out of the "I'll just try this out on my account to see if it'll work" setup.